lpcfg_gensec_settings implicitly takes a talloc_reference of the lp_ctx. This must be replaced, for example by explicitly taking all gensec-relevant parameters in this routine or by hiding the referenced object behind a wrapper, much like tdb_wrap does it.

Has anything changed since January?
Im am not aware of anything.
I understand this bug report as pointing out a bad and potentially dangerous design. I have not yet seen concrete crashes or similar. Are there such reports?
- Can we do anything about it in the near future?
- Is this really blocking the 4.0 release or is it rather "technical debt" that we should try to fix for 4.0, but would not mean the end of the world if it gets fixed later?
This is not biased in any way, I just want to understand.
Thanks - Michael